Interesting. I did a quick

cURL

on the endpoint and didn't see any redirects. Is it possible to test that on one of the hosts that's showing offline?

curl -X -iL POST <https://fleet.ze.delivery/api/v1/osquery/enroll>

It should result in the following error:

{
  "message": "Expected JSON Body",
  "errors": [
    {
      "name": "base",
      "reason": "Expected JSON Body"
    }
  ]
}

Do you see any indication that the requests are making it through to the server in the Fleet logs? Do those hosts have anything else that sets them apart from the hosts that are responding correctly (AV software, VPN, Firewall settings)?

\* When checking the server logs, you'll see some errors from me pinging the server.